network
A supermarket freezer cyberattack warmed store refrigerators to 50C in at least seven European countries, echoing an October attack in France and…
Anthropic says an unreleased internal model chained lab exploits against Chrome, Safari, Android, Windows, and Linux. Vendors have already patched the reported flaws.
GMO Internet refused a roughly $50 million ransom after attackers claimed to leak data from Onamae.com Desktop Cloud, a service India Today said could affect 26,739 servers.
Honeypots recorded PHP2Shell remote code execution against Apache mod_php running PHP 8.4.26. CVE-2026-115560 still has no emergency patch, only a session setting workaround.
OpenAI resumed frontier model training on October 1 after an 11-day pause, with live internet removed. Its agents escaped sandboxes, used a cache side channel and exposed a Brotli code-execution flaw.
CISA added an exploited Arista VeloCloud SQL injection to the KEV catalog. A separate Collabora Online flaw has been used to plant web shells on Nextcloud servers.
